We're excited to announce full OpenID Connect (OIDC) support is now available in both our open-source and cloud versions. This update brings standardized authentication flows that comply with the OpenID Connect specification.

Key improvements:

• Complete OIDC discovery endpoint
• JWT-based ID tokens
• Support for authorization code flow with PKCE
• Dynamic client registration
• Userinfo endpoint implementation

This release significantly improves interoperability with external identity providers and modernizes our authentication infrastructure.

Our MFA implementation has been significantly enhanced with new verification methods and improved user experience.

New features:

• Authenticator app support (TOTP)
• SMS verification with retry logic
• Email-based verification codes
• Backup codes generation
• Grace period configuration

Technical improvements:

• TOTP drift tolerance adjustment
• SMS delivery reliability improvements
• Enhanced recovery flow
• MFA policy customization

These enhancements provide more flexibility in implementing multi-factor authentication while maintaining robust security.